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ABSTRACT 



A new system for communicating between computer pro- 
grams is disclosed which includes a collaboration software 
program having a directory publishing procedure and a 
message forwarding procedure. In an example embodiment, 
the disclosed system provides a user of a network applica- 
tion program, such as an internet chat program, with an 
out-of-band mechanism to send invitations to other users of 
the network application program. A user of the network 
application program requests a list of all users known to the 
collaboration software program. The user list is for example 
a list of user names associated by the collaboration software 
program with URLs of home pages of users known to or 
registered with the collaboration software program. The user 
seeking to send the message then selects a user name and 
provides a message to the collaboration software program. 
The collaboration software program then posts the message 
so that the message can be displayed in the home page of the 
selected user. For example, the message is displayed in a 
screen within the window of the browser executing in a 
client system on which the selected user is working. 

16 Claims, 8 Drawing Sheets 
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INTER-PROGRAM SYNCHRONOUS 
COMMUNICATIONS USING A 
COLLABORATION SOFTWARE SYSTEM 

FIELD OF THE INVENTION 

The invention relates generally to communications 
between computer software programs implementing a 
restrictive security model and more specifically to a method 
and apparatus for synchronous communications between 
computer software programs which can be securely down- 
loaded from web pages, such as Java™ applets. 

BACKGROUND 

The wide availability of the Internet permits an ever 
increasing number of users to download data from remote 
systems onto their local system. These actions are typically 
done through a browser software program which forms 
logical network connections with a remote system, and then 
uses the Hyper-Text Transport Protocol (HTTP) to move 
data from the remote system. The data may, for example, 
describe or consist of a set of Hyper-Text Markup Language 
(HTML) instructions. Such data frequently indicates or 
includes computer program code that is ultimately executed 
on the local machine. For example, the HTML instructions 
from a remote system may include indication of an "applet" 
program, written in the Java™ language developed by Sun 
Microsystems, Inc. 

An applet is an example of a program which is typically 
embedded within a Web page, and which is executed when 
the Web page is browsed. Several restrictions apply to the 
design and operation of applets. Some of these restrictions 
relate to secure operation and execution of the applet on the 
client system. This arises from a concern most users have 
regarding the potentially devastating effects which can be 
caused by execution of poorly or maliciously designed code 
on their local system. The security restrictions imposed on 
applets have the result that applets loaded onto a local 
system from over the network cannot make network con- 
nections to hosts other than the host from which they are 
downloaded from. In addition, unsolicited information can- 
not be read from or written to the local computer system 
(hard disk) by an applet downloaded from a remote host. 
Moreover, applets have no capabilities for directly commu- 
nicating with other applets. Because of these significant 
limitations, applets can generally be used for very little other 
than displaying data or managing user inputs. 

Existing systems have thus been able to use applets in 
very limited ways. The above described restrictive security 
model for applets provided tight control over information 
flowing to and from applets, and thus allowed users to be 
assured that they were safe in loading applets down onto 
their local system for execution. However, several draw- 
backs result from the design and use of applets in existing 
systems. 

First, existing systems do not permit a user of a first 
network application, for example a user of a chat room 
application, to communicate with another user who is not 
currently using that same network application, but who is 
currently running his or her local browser. In addition, 
existing systems provide no mechanisms for users of a 
network application, for example a shared whiteboard 
application, to determine whether or not applets are being 
run by other users that are potentially communicative with 
the applet of the local user. This is the consequence of 
preventing direct communication between applets. 

For these reasons and others, it would be desirable to have 
a system which permits programs implementing a restrictive 
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security model to communicate without otherwise compro- 
mising that security model. The new system shall allow such 
programs to communicate regardless of whether they were 
downloaded from a common network server, and further 
5 regardless of whether they are both currently running a 
common network application client. In addition, the new 
system should enable users to determine if other users are 
currently available for such inter-program communications. 

10 SUMMARY 

In accordance with principles of the invention there is 
disclosed a new system for communicating between com- 
puter programs. The disclosed system includes a collabora- 
tion software program having a directory publishing proce- 

15 dure and a message forwarding procedure. In an example 
embodiment, the disclosed system provides a user of a 
network application program, such as a chat program, with 
an out-of-band mechanism to send invitations to other users 
of the network application program who are not currently 

20 executing the network application program, but which are 
logged onto the network, for example through a browser 
program. The user of the network application program 
requests a list of all users known to the collaboration 
software program. The user list is for example a list con- 

25 taining user names associated with users known to or 
registered with the collaboration software program. The user 
seeking to send the message then selects one of the other 
users in the list and provides a message to the collaboration 
software program. The collaboration software program then 

30 maps the selected user name to a URL indicating a home 
page associated with the selected user name. The URL is for 
example mapped to the user name internally by the collabo- 
ration software program, thus eliminating the need for users 
to know each other's URLS. The collaboration software 

35 program then posts the message so that the message can be 
displayed in the home page of the selected user. For 
example, the message is displayed in a screen within the 
window of the browser executing in a client system on 
which the selected user is logged in. 

40 In this way there is provided a new system which permits 
programs implementing a restrictive security model to com- 
municate without otherwise compromising that security 
model. The new system allows such programs to commu- 
nicate regardless of whether they were downloaded from a 

45 common network server, and further regardless of whether 
they are both currently running a common network appli- 
cation program. In addition, the new system enables users to 
determine if other users are currently available for such 
inter-program communications. 

50 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram showing hardware and software 
elements of an example execution environment for the 
disclosed system; 
55 FIG. 2 is a block diagram showing software elements in 
an example embodiment of a collaboration software server; 

FIG. 3 is a block diagram showing elements in an 
example embodiment of a collaboration software system, a 
60 web browser, and a web server; 

FIG. 4 is a block diagram showing elements in an 
example embodiment of a collaboration software client; 

FIG. 5 is a block diagram showing the operation of the 
disclosed system; 
65 FIG. 6 is a flow chart showing an example embodiment of 
steps performed by the disclosed collaboration software 
server; 
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FIG. 7 is a flow chart showing an example embodiment of sent using an established application layer protocol from one 

steps performed by the disclosed client system to send a of Collaboration Software Clients 68 or 38 to a closely 

notification or invitation message; and coupled sever application in an Application Layer 86 of the 

FIG. 8 is a flow chart showing an example embodiment of Collaboration Software Server 80 are "in-band" messages, 

steps performed by the disclosed client system receiving a 5 For example, where the Collaborate Software Client 38 

notification or invitation message. contams an internet chat client app let assorted with an 

& internet chat server application in the Application Layer 

DETAILED DESCRIPTION OF TTIE of the Collaboration Software Server 80, those messages 

PREFERRED EMBODIMENTS sent between that applet within the Collaboration Software 

10 Client 38 and the internet "chat" server application in the 

Now with reference to the elements of FIG. 1, there is Collaboration Software Server 80 are considered to be 

described an example embodiment of the disclosed system « in .band" messages. Such in-band messages in the case of 

for inter-program communications. FIG. 1 shows a Collabo- an internet "chat" client would then typically be forwarded 

ration Software Client 38, which may include one or more by the iaterael « char application l0 other internet 

applets, and which may be downloaded, for example under chal clients [n an example embodiment, such in-band 

control of a Web Browser program 39, from a Server System mesS ages are sent directly from the Collaboration Software 

A 10. The Server System A 10 is described solely for CUem 38 t0 tne applicatioD in the Collaboration Software 

purposes of example as including conventional computer Server 80 through a xcp/ip socket reser v e d for Internet 

hardware components on which is running a particular Web Relay Chat (IRC) Further ^ the example embodiment, the 

Server Program 25. The Client System A 30 onto which the established application layer protocol is an extended version 

program is loaded includes for example conventional com- of lhe conventional Irjte met Relay Chat (IRQ protocol as 

puter hardware components as well as the Web Browser 39. disclosed in RFC 1459, "Internet Relay Chat Protocol", by 

Applets within the Collaboration Software Client 38 imple- Jarkko oikarinen, May 1993. Accordingly, in the example 

ment a security policy which prevents the applets from embodiment, in-band messages support the Internet Relay 

making a network connection, for example a socket con- Chat p rot0 col functions. Further in the example 

nection under TCP/IP, with a system other than the Server embodiment, the internet "chat" client applets are extended 

System A 10. The Collaboration Software Client 38 is for ^ provide addi tional in-band messages to support voting 

example embedded in a Web Page A 24 associated with a and wh iteboard capabilities. 

user of the Client System A 30. Out-of-band messages are not sent by the internet "chat" 

FIG. 1 further shows a second Collaboration Software 3Q client applet within the Collaboration Software Client to the 

Client 68, for example including a number of applets, that is intcrnct « chat » xrvct application within the Collaboration 

downloadable from a Server System B 42 to a Client System Software Server 80. Instead, the internet "chat" client applet 

B 56. The Client System B 56 is, for example, a second wilnin tne Collaboration Software Client sends out-of-band 

client system, distinct from Client System A 30 onto which messages to other applications in the Application Layer 86 

the first program was downloaded. The applets within Col- 35 of the Collaboration Software Server 86. For example, the 

laboration Software Client 68 also implement a restrictive internet "chat" client applet sends two out-of-band mes- 

security policy which prevents the applets from making a sages: (j) an «i nv itation" message, and (2) an "request" 

network connection with a system other than the Server meS sage for obtaining a list of potential invitees. 

System B 42. The Collaboration Software Client 68 is, for ^ internet « char dient sends the outHof . band request 

example, embedded in a Web Page B 48 associated with a 4Q message t0 a predetermined application, for example indi- 

user of the second Client System B 56. cated by lhe jjrl of that predetermined application, where 

Now with reference to the elements of FIG. 2, a collabo- the predetermined application is other than the internet 

ration software program is further disclosed, which provides « cnat » server application, and where the predetermined 

both a data repository and a directory publishing service. application is within the Application Layer 86 of the Col- 

The collaboration software program for example includes a 45 laboration Software Server 80. The URL of the predeter- 

Collaboration Software Server 80 which includes a Data mined application for example indicates a Collaboration 

Repository 84, and which builds user specific web pages in Software Dispatcher (see FIG. 3) as well as the name of the 

response to browser requests. The Collaboration Software predetermined application. The Collaboration Software Dis- 

Server 80 executes, for example, on the Server System A 10, patcher processes the fields necessary to locate the prede- 

as shown in FIG. 1. The Collaboration Software Server 80, 50 termined application. Accordingly the URL is parameterized 

for example, corresponds to the Collaboration Software with the name of a predetermined application layer program 

Server 28, as shown in FIG. 1. The collaboration software i n the Collaboration Software Server 80 that will return a list 

program further includes a number of client parts, for of users. 

example capable of processing HTML and embedded For examp l e , in one embodiment, the code necessary to 

applets, which execute on a number of client systems. 55 haQdle out _ of _ ban d messages is present in a number of 

For example, the client parts of a collaboration software applications within the Application Layer 86 of the Collabo- 

program are shown as Collaboration Software Client 38 and ra tion Software Server 80. When the internet "char* 1 client is 

Collaboration Software Client 68, as shown in FIG. 1. In the an applet and accordingly downloaded from a server system, 

example embodiment of FIG. 1, the Collaboration Software it receives the location (URL) of one of those applications 

Client 38 and any applets it includes execute in the same 60 within the Application Layer 86, based on the current 

execution context as the Web Browser 39. Similarly, the display context of the client system. For example, where the 

Collaboration Software Client 68 and any applets it includes current display includes in part a portion provided by one of 

execute in the same execution context as the Web Browser the applications within the Application Layer 86, then if an 

69. internet "chat" client is downloaded from the same server as 

The Collaboration Software Clients 68 and 38 commu- 65 the Collaboration Software Server 80, the location (URL) of 

nicate with Collaboration Software Server 28 via in-band that one of the applications within the Application Layer 86 

and out-of-band messages. For example, those messages is downloaded with the internet "chat" client. 
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A Directory Publishing service is further shown included In the example embodiment, parameters are passed to the 

within the Collaboration Software Server 80. The Directory Dispatcher 108 within segments of a URL. The Dispatcher 

Publishing Service 88 stores the names of users of client 108 parses the URL into pieces that provide the overall 

systems having collaboration software clients, such as Client control of the program: (1) the name of the Collaboration 

System 30 and Client System 56 in FIG. 1. When an 5 Software Server 80, (2) an access control area name, (3) a 

application in the Application Layer 86 of the Collaboration message name, and (4) some number of message arguments. 

Software Server 80 receives a request from an applet within ln ^ example embodiment, each user registers once with an 

a Collaboration Software Client, for example via a TCP/IP acc&ss " l f° 1 1 . ar ?: ?£ ed ° n ^~ aCCCSS C ° nlr0 ' "l* ? mC 

connection between a client system and the server, it uses the m ,h , e m }* the , r Web 102 where * fi " d the 

Directory Publishing Service 88 to provide a list of user to user s credential for authent 1C ation purposes and also how to 

names. In response to receipt of the list of user names from authenticate the user and pass the authenticated user identity 

the directory publishing procedure, a display procedure !° tne Collaboration Software Server 80. Given the user 

within the requesting applet displays the list of user names ff 1 '* a ° d the f^ 55 cont :° 1 Nation the Collaboration 

through, for example, a dialog box. Then, by means of a user Software S _, erve ' looks U P user P rofl ' e > ? hecks 

input procedure, the applet receives from the user of the is control and performs any other user speafic tunclions. The 

client system indication of a selected one of the user names ™me and mes ?8 e "Stents •« » hen b V the 

and a message to be sent to that user, for example, a user of Collaboration Software Server 80 to select particular actions 

a remote client system. !° P erform 10 one of tbe a PP u ""°ns, for example as shown 

Tne disclosed system farther includes an invitation mes- m ^ow wilh reference to FIG. 4, there is described an 

sage ransm. ting procedure, wrthin for examp e the internet 20 embodimen , of a Collaboration Software Client 

chat client applet, that transmits the inputted message, ^ ex , e CoUaboration Software Cliem no is 

with the selected one of the user names to the Collaboration , . . r r . n . iin . 

0 f, „ *ja ii u c. a shown including a Directory Look-up Procedure 112, which 

Software Server 80 or the collaboration software program. A - . . , , , ' . / ,. 

, r , . • • i j j *u* for example includes code portions for sending a message to 

message polling mechanism is included within a message » u o « u ** 0 r . 0 on * & , . 

t . & r i*i ..I.. i ii « 4 . o ^ i< the Collaboration Software Server 80, for example using a 

posting applet, also within the Collaboration Software 25 ~ . kl „ , n t . , . b 

ii ■ a r j i j* ■ t . c <u Message Transmitter Code Portion 116, wherein the mes- 

Client, for downloading an invitation message from the > t u e . j u i- *• • ,u 

_* r *l n l c. sage is either for or routed by one of the applications in the 

server part ot the collaboration software program. A ,. r otr e J _ „ , . 5, r _ „ 

r r & Application Layer 86 of the Collaboration Software Server 

In the example embodiment of the CoUaboration Software 80 ^ Collaboration Software Client 110 is further shown 

Server Part 80, shown in FIG. 2, the Directory Publishing to mclude a Message Po iu ng Mechanism 118, for example 

Service 88 is incorporated in a number of applications within a Message Posting Applet, which receives messages 

within an Application Layer 86. Other example applications reC eived from the CoUaboration Software Server 80, for 

within the application layer of the Collaboration Software examp i e through a pre-determined port or TCP socket. In an 

Server 80 (shown as Application 1 90 and Application 2 92) example embodiment, the Message Posting Applet receives 

include for example a calendar application, a message meS sages from a variety of sources, and general purpose 

filtering application, and a document publishing appUcation. message posting facility. The Collaboration Software Client 

The calendar application for example permits users to enter 110 supports and includes various other Applets 120, Java 

a set of scheduled events, and then presents those events in Script and HTML portions 122 

a calendar format. One or more of the applications in the FIG. 5 shows an example of operation of a CoUaboration 

application layer of the Collaboration Software Server 80 Software Client 162. A Collaboration Software Server 160 is 

are for example network application servers, and consists of shown> as wel , a& M ^ applet 166 on a first 

a set of functions, each responding to a different user input. Homc p w ^ M Posd A fct m 0Q ft 

Each of the applications is modularly organized. scCQnd home pagc 170 . A Collaboration Software Client 162 

Further in the example embodiment shown in FIG. 2, the scnds a request message to a dispatcher within the CoUabo- 

Data Repository 84 is shown for example as part of a tool kit 45 rat i on Software Server 160, which for example invokes 

layer. The Data Repository 84 shown in FIG. 2 is for another appUcation using the Common Gateway Interface 

example a built in database used to store various object ( C GI). For example the Collaboration Software Client 160 

instances. The example database is a relational model with scnds a req uest message through a TCP/IP socket with the 

an object hierarchy relationship faciUty available to those scrvcr system . a Web Server program on the server system 

applications which require it. 5Q rcce ives that message, which consists of a URL, and passes 

Now with respect to FIG. 3, there is described an example the message the the dispatcher based on the contents of the 

of the Collaborative Software Server 80 operating in con- URL. The dispatcher examines the fields within the URL to 

junction with a Web Browser 100 and a Web Server 102. As determine a responding application within the Application 

is conventional, the Web Browser 100 submits requests to Layer 161 of the Collaboration Software Server 160 to 

the Web Server 102 whenever a user opens a Unk. When the 55 process the request message. 

link points to a file, then the Web Server 102 sends the file The responding application runs in the context of the 

to the Web Browser 100. The link may also point to Collaboration Software Server 160, with access to aU func- 

programs on a server; in that case, the Web Server 102 tions provided by the tool kit layer of the Collaborative 

invokes the program and the program responds to the user. Software Server 160, as weU as the Directory Publishing 

In the example embodiment, when the link points to the 60 Service 88. The responding application then caUs the Direc- 

Collaboration Software Server 80, the Web Server 102 tory Publishing Service 88. The Directory Publishing Ser- 

invokes a Dispatcher 108 through a Common Gateway vice 88 returns a list of users from its data repository. The 

Interface 106. Based on the information passed along with responding appUcation then returns the Ust of users to the 

the user request, the Dispatcher 108 invokes a specific Collaboration Software CUent 162. 

application within the Collaboration Software Server 80, 65 Upon receipt of the list of users, an internet "chat" client 

which, in turn, calls various tools in the tool kit layer to applet within the Collaborative Software Client 162 displays 

respond to the user's request. the list of users. The user of the client system then indicates 
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one of the users within the list. The internet "chat" client 
applet in turn sends an out-of-band invitation message via 
the dispatcher within the Collaboration Software Server 160. 
The dispatcher determines an application within the Appli- 
cation Layer 161 of the Collaboration Software Server 160 
to route the invitation message. For example, the same 
application within the Application Layer 161 is selected to 
route the invitation message as was selected to return the 
user list. 

Within the Application Layer 161, there is included a 
message store. The invitation message is initially routed by 
the application within the Application Layer 161 by adding 
the invitation message to the message store. Each message 
includes fields indicating what type the message is, for 
example an invitation to chat, as well as other information 
such as the subject of the proposed "chat session", and a 
"chat channel" on which can be found the person sending the 
invitation to chat. 

Message Posting Applets 166 and 174 periodically check 
the message store within the Application Layer 161 to 
determine if any new messages have been posted for their 
client. Messages which may be posted in the message store 
include chat invitation messages, collaboration software 
status, calendar event notifications, and inter-user messages. 
Each Message Posting Applet 166 and 174 includes a set of 
message filtering and display rules. The Message Posting 
Applet displays any new messages which satisfy its current 
filtering rules. For example, where the message is an invi- 
tation to chat, the Message Posting Applet may invoke a new 
internet "chat" client applet in response to a user input, for 
example in response to a double click on the displayed 
invitation. 

FIG. 6 shows steps performed by an example embodiment 
of the disclosed system as shown in FIG. 5. At step 200 a 
Web Server program receives a request message from the 
Collaboration Software Client and forwards it to the dis- 
patcher within the Collaboration Software Server. At step 
202 a responding application in the application layer of the 
Collaboration Software Server looks up a list of current 
users using the Directory Publishing Service. The respond- 
ing application then sends the user list to the requesting 
client at step 204. At step 206, the Collaboration Software 
Server receives an invitation message from the client includ- 
ing an indicated one of the users in the list of current users. 
At step 208 a network application server within the Col- 
laboration Software Server routes the notification message 
to the indicated user, for example by posting the message to 
a message store formed using the database functions pro- 
vided by the tool kit layer within the Collaboration Server 
Software. 

FIG. 7 shows steps performed by an example embodiment 
of the Collaboration Software Qient 110 as shown in FIG. 
4. At step 210, the Collaboration Software Client downloads 
a network application client for example including one or 
more applets such as an internet "chat" client applet. At step 
212 the Collaboration Software Client sends a request 
message to the Collaboration Software Server. At step 214 
the Collaboration Software Client receives a user list from 
the Collaboration Software Server, and displays the list of 
users. At step 216 the Collaboration Software Client inputs 
a selected user from the local user, for example by the local 
user double clicking on one of the users names in the 
displayed list of users. At step 218 the Collaboration Soft- 
ware Client sends a invitation or notification message 
through the Collaboration Software Server. 

FIG. 8 shows the steps performed by an example embodi- 
ment of the Collaboration Software Client in response to 
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receipt of a notification or invitation message. At step 220, 
the notification is received. At step 222 the Collaboration 
Software Client displays a notification, for example through 
a dialog box presented by a message posting applet in the 

5 screen display of the local web -browser program. 

While this invention has been described with reference to 
specific embodiments, this description is not meant to be 
construed in a limiting sense. Various modifications of the 
disclosed embodiments, as well as other embodiments of the 

10 invention, will be apparent to persons skilled in the art upon 
reference to this description. It is therefore contemplated that 
the appended claims will cover any such modifications or 
embodiments as fall within the true scope of the invention. 
What is claimed is: 

1. A system for communicating between computer 
programs, comprising: 

a first program downloadable from a first server computer 
system to a first client computer system, said first 
program implementing a security policy which pre- 
vents said first program from communicating with a 
second client computer system; 
a second program downloadable from a second server 
computer system to said second client computer sys- 
tem; 

a collaboration software program, including a server part 
and a number of client parts, said server part including 
a number of network applications, wherein a first of 
said number of network applications is a network 
application server closely coupled with said first 
program, said client parts including said first program 
and said second program; 
a directory publishing procedure, within said server part 
of said collaboration software program, that stores a list 
of user names and corresponding addresses; 
a directory look-up procedure within said first program, 
that transmits a request message to said directory 
publishing procedure to obtain said list of user names; 
a user input procedure, that receives indication of a 
selected one of said user names and a message to be 
sent to a user associated with said selected one of said 
user names; 

a message transmitting procedure, within said first 
program, that transmits said message, with said 
selected one of said user names to a second one of said 
number of network applications, wherein said second 
one of said number of network applications posts said 
message into a message store in said server part of said 
collaboration software program; and 
a message polling mechanism, within said second 
program, for pulling said message from said message 
store in said server part of said collaboration software 
program. 

2. The system as in claim 1, wherein said message is an 
55 invitation to participate in a internet chat program group. 

3. The system as in claim 1, wherein said message is a 
notification. 

4. The system as in claim 1, wherein said first server is the 
same as a second server from which said second program is 
downloaded. 

5. The system as in claim 1, wherein said first program is 
embedded in a first web page, said first program executed on 
said first client system when said first web page is down- 
loaded from said first server computer system. 

6. The system as in claim 1, wherein user names are stored 
in the collaboration software server part by storing of URLs 
of home pages associated with users. 
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7. The system as in claim 1, wherein said second program 
is embedded in a second web page, said second program 
executed on said second client system when said second web 
page is downloaded from said second server computer 
system, 5 

8. The system as in in claim 1, wherein said first program 
is an applet. 

9. The system as in claim 1, wherein said second program 
is an applet. 

10. The system as in claim 1, wherein said first program 10 
is downloadable under control of a web program. 

U. The system as in claim 1, wherein said second 
program is downloadable under control of a web browser 
program. 

12. The system as in claim 1, wherein said server part of 15 
said collaboration software program executes on said first 
server system. 
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13. The system as in claim 1, wherein said second 
program implements a security policy which prevents said 
second program from communicating with said first client 
computer system. 

14. The system as in claim 1, wherein said client part 
includes one or more HTML instructions. 

15. The system as in claim 1, wherein said corresponding 
addresses stored by said directory publishing procedure are 
URLs of home pages of the corresponding users. 

16. The system as in claim 1, further comprising a display 
procedure within said first program, that displays said list of 
user names received from said directory publishing proce- 
dure. 
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